This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: ju1xtL2W6PVZuWH/xasK8GgF7BrTaTSrkpJAHa1i63M= Subject key identifier: DA:1F:38:70:7C:70:34:6B:9E:95:1A:F8:FC:D4:D1:CE:EB:8F:A0:37 Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: B80A6044AD54BAE394302EAB80563A2CBD241A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 01F4 Signing time: Mon 15 Dec 2025 16:51:25 +0000 Manifest this update: Mon 15 Dec 2025 16:46:25 +0000 Manifest next update: Thu 18 Dec 2025 22:49:25 +0000 Files and hashes: 1: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: a5r+evyHi4RcP5APmnZM1VFgptF4O6HvhFasr9olIfY=) 2: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) 3: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: bSd7lFuLXvK7t89PrxW8ofWlYEOIMss9c7qTJsvJO80=) 4: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: VBc17rVAjRQTsxZoc7G/sn1jnr9UaiYu++iNUoA/KPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 22:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b8:0a:60:44:ad:54:ba:e3:94:30:2e:ab:80:56:3a:2c:bd:24:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Dec 15 16:46:25 2025 GMT Not After : Dec 18 22:49:25 2025 GMT Subject: CN=DA1F38707C70346B9E951AF8FCD4D1CEEB8FA037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:66:f4:19:4c:4e:9f:a9:b5:4a:ec:04:01:72: 65:b5:42:c9:69:17:dc:24:d6:60:6b:e6:88:c5:8d: 07:02:4b:e2:fb:0b:ca:92:2f:cd:53:32:52:93:a3: 3a:1d:0f:3e:35:50:ec:86:ad:94:53:59:3d:65:02: a0:d5:e5:fd:65:e8:eb:d2:25:b4:2d:f5:17:51:8b: 8a:64:b9:f2:2d:14:de:ac:62:99:11:ff:a0:34:c6: 1c:45:84:e1:48:56:33:2d:4f:5e:5a:14:fe:a8:59: 70:0f:23:a0:f6:c3:32:b0:6d:57:46:1c:3d:8f:82: 52:19:07:08:8c:4d:0e:41:99:5b:d3:9c:f3:63:3e: 61:2c:fa:3b:b2:2c:5c:05:b3:72:a0:3c:c7:a5:77: 6c:31:bf:c4:f1:c6:ab:91:2e:2c:6a:f9:dd:a5:a4: 44:a9:e6:4f:6b:6e:92:ee:01:c3:21:fc:4e:a3:cb: da:ab:9f:8f:76:0a:f8:5e:33:c5:5b:c6:60:ff:f0: 76:59:96:b3:9d:47:66:92:21:2e:11:27:78:80:ac: c1:3b:44:3f:1c:df:66:93:6a:7c:09:73:97:be:48: 80:db:9e:5c:b0:ef:90:90:2a:2c:24:8f:1d:83:3b: 43:74:0b:df:ba:c8:77:18:27:12:f7:a7:3d:b5:2e: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1F:38:70:7C:70:34:6B:9E:95:1A:F8:FC:D4:D1:CE:EB:8F:A0:37 X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:0b:a3:d5:57:45:f5:a1:ca:bb:4e:e0:5f:44:db:c2:fa:16: e3:b1:d3:e3:de:1f:02:7f:9a:02:7a:88:4b:f5:80:b4:e2:af: 4f:4c:6f:a7:97:76:59:68:6a:31:eb:d4:26:3b:84:6c:2b:83: d5:14:ca:e5:4a:62:fb:0c:da:f3:31:b8:56:50:9c:3d:ca:90: d4:ab:10:5b:8b:7c:3a:8f:a0:44:6f:54:e8:13:e4:1d:31:83: e2:0e:27:32:9c:0a:de:51:f5:30:90:01:11:69:4c:52:d9:11: 71:cc:10:fc:10:01:ec:a7:ef:00:02:38:64:2a:af:11:9e:37: 52:68:40:54:99:2c:ad:c9:ed:21:8a:ec:e7:8f:62:18:eb:6e: dd:09:2d:12:bd:b6:50:7b:b0:0d:3f:36:09:98:e7:67:9e:be: 9f:21:da:2a:80:be:dc:50:46:88:ec:bd:0d:68:0e:25:a4:5d: 9f:bc:63:e4:db:08:b7:9e:3c:57:08:97:0e:f5:9b:b7:4b:38: 2b:8f:e1:8b:dc:32:aa:24:27:78:5a:b6:78:45:54:f3:9d:80: 24:65:ed:c5:51:60:65:80:1c:30:e8:4a:6e:1e:72:b3:a4:43: 77:94:5e:a9:13:e1:21:7f:a5:6f:d9:17:aa:45:b0:25:db:17: c4:55:36:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUALgKYEStVLrjlDAuq4BWOiy9JBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNTEyMTUxNjQ2MjVaFw0yNTEyMTgyMjQ5MjVaMDMxMTAvBgNV BAMTKERBMUYzODcwN0M3MDM0NkI5RTk1MUFGOEZDRDREMUNFRUI4RkEwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZvQZTE6fqbVK7AQBcmW1Qslp F9wk1mBr5ojFjQcCS+L7C8qSL81TMlKTozodDz41UOyGrZRTWT1lAqDV5f1l6OvS JbQt9RdRi4pkufItFN6sYpkR/6A0xhxFhOFIVjMtT15aFP6oWXAPI6D2wzKwbVdG HD2PglIZBwiMTQ5BmVvTnPNjPmEs+juyLFwFs3KgPMeld2wxv8TxxquRLixq+d2l pESp5k9rbpLuAcMh/E6jy9qrn492CvheM8VbxmD/8HZZlrOdR2aSIS4RJ3iArME7 RD8c32aTanwJc5e+SIDbnlyw75CQKiwkjx2DO0N0C9+6yHcYJxL3pz21LgVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2h84cHxwNGuelRr4/NTRzuuPoDcwHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFULo9VXRfWhyrtO4F9E28L6FuOx0+PeHwJ/ mgJ6iEv1gLTir09Mb6eXdlloajHr1CY7hGwrg9UUyuVKYvsM2vMxuFZQnD3KkNSr EFuLfDqPoERvVOgT5B0xg+IOJzKcCt5R9TCQARFpTFLZEXHMEPwQAeyn7wACOGQq rxGeN1JoQFSZLK3J7SGK7OePYhjrbt0JLRK9tlB7sA0/NgmY52eevp8h2iqAvtxQ RojsvQ1oDiWkXZ+8Y+TbCLeePFcIlw71m7dLOCuP4YvcMqokJ3hatnhFVPOdgCRl 7cVRYGWAHDDoSm4ecrOkQ3eUXqkT4SF/pW/ZF6pFsCXbF8RVNoQ= -----END CERTIFICATE-----Generated at Tue Dec 16 06:05:09 2025 by rpki-client